5abd156ae6677c87361342ed56f4d060 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5abd156ae6677c87361342ed56f4d060
Size

4KB
MD5

5abd156ae6677c87361342ed56f4d060
SHA1

123ba0b22ad85488ec14ae0fa90f6536db87ed8a
SHA256

e0cbce5ddf2ce621df42e41d157322df12c11f360510f4d6156148dd46f04a62
SHA512

cbd444d367a1b77a70fb6ae955ebfce2239b5def81ed1b85d57273033c62ac457c8a5072c591309f95546bd63432fa993f826903bb985fd37a70045056c2ae29
SSDEEP

48:qmUAbL3UZ2ARKIzy1BsjiQ0IZWseWTvlZLvlZ5WwGnLRGRlqTJzfvw1zGxZcv:dUAbgZHRKIz8W0EW65ZhHWwgGlqW44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5abd156ae6677c87361342ed56f4d060

Files

5abd156ae6677c87361342ed56f4d060
.exe windows:5 windows x86 arch:x86

400a8243fd5c89ee08c1a4444ef5004f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE